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THAT WHICH IS CLAIMED IS: 

1. A cryptographic device comprising: 

a cryptographic module and a communications module 
removably coupled thereto; 

said cryptographic module comprising 
a first housing, 

a user Local Area Network (LAN) interface 
carried by said first housing, and 

a cryptographic processor carried by said 
first housing and coupled to said user LAN 
interface; 

said communications module comprising 
a second housing, and 

a network wireless LAN interface carried by 
said second housing, coupled to said cryptographic 
processor and switchable between wireless LAN 
modes . 

2. The cryptographic device of Claim 1 wherein 
said network wireless LAN interface circuit is switchable to 
one of an access point (AP) mode, an infrastructure mode, 
and an ad-hoc mode. 

3. The cryptographic device of Claim 1 wherein 
said cryptographic module further comprises a first 
connector carried by said first housing and coupled to said 
cryptographic processor; wherein said communications module 
further comprises a second connector carried by said second 
housing and connected to said network wireless LAN 
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interface, said second connector being removably mateable 
with said first connector of said cryptographic module. 

4 . The cryptographic device of Claim 1 wherein 
said user LAN interface comprises an Ethernet interface. 

5. The cryptographic device of Claim 1 further 
comprising a power circuit carried by said first housing and 
powering said cryptographic processor, said user LAN 
interface, and said network LAN interface. 

6. The cryptographic device of Claim 1 wherein 
said cryptographic processor implements an encryption 
algorithm to provide a predetermined security level. 

7. The cryptographic device of Claim 1 wherein 
said cryptographic processor comprises: 

a host network processor coupled to said user LAN 
interface; and 

a cryptography circuit coupled to said host 
network processor. 

8. The cryptographic device of Claim 7 wherein 
said cryptographic processor further comprises: 

an encrypted data buffer circuit coupled between 
said user LAN interface and said cryptography circuit; and 

an unencrypted data buffer circuit coupled between 
said cryptography circuit and said network LAN interface. 



9. The cryptographic device of Claim 1 wherein 
said cryptographic module further comprises a tamper circuit 
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for disabling said cryptographic processor based upon 
tampering with said first housing. 

10. The cryptographic device of Claim 9 wherein 
said tamper circuit comprises at least one conductor 
substantially surrounding said cryptographic processor, and 
wherein said cryptographic processor is disabled based upon 
a break in said at least one conductor. 

11. A cryptographic device comprising: 

a cryptographic module and a communications module 
removably coupled thereto; 

said cryptographic module comprising 
a first housing, 

a user Local Area Network (LAN) interface 
carried by said first housing, and 

a cryptographic processor carried by said 
first housing and coupled to said user LAN 
interface; 

said communications module comprising a second 
housing and a network wireless LAN interface carried by said 
second housing; 

said communications module comprising a 
predetermined one from among a plurality of interchangeable 
communications modules, and said network wireless LAN 
interfaces of said plurality of interchangeable 
communications modules each operating using a different 
wireless LAN mode. 
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12. The cryptographic device of Claim 11 wherein 
the different wireless LAN modes comprise an access point 
(AP) mode, an infrastructure mode, and an ad-hoc mode. 

13. The cryptographic .device of Claim 11 wherein 
said cryptographic module further comprises a first 
connector carried by said first housing and coupled to said 
cryptographic processor; wherein said communications module 
further comprises a second connector carried by said second 
housing and connected to said network wireless LAN 
interface, said second connector being removably mateable 
with said first connector of said cryptographic module. 

14. The cryptographic device of Claim 11 wherein 
said user LAN interface comprises an Ethernet interface. 

15. The cryptographic device of Claim 11 further 
comprising a power circuit carried by said first housing and 
powering said cryptographic processor, said user LAN 
interface, and said network LAN interface. 

16. The cryptographic device of Claim 11 wherein 
said cryptographic processor implements an encryption 
algorithm to provide a predetermined security level. 

17. The cryptographic device of Claim 11 wherein 
said cryptographic processor comprises: 

a host network processor coupled to said user LAN 
interface; and 

a cryptography circuit coupled to said host 
network processor. 
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18. The cryptographic device of Claim 17 wherein 
said cryptographic processor further comprises: 

an encrypted data buffer circuit coupled between 
said user LAN interface and said cryptography circuit; and 

an unencrypted data buffer circuit coupled between 
said cryptography circuit and said network LAN interface. 

19. The cryptographic device of Claim 11 wherein 
said cryptographic module further comprises a tamper circuit 
for disabling said cryptographic processor based upon 
tampering with said first housing. 

20. The cryptographic device of Claim 19 wherein 
said tamper circuit comprises at least one conductor 
substantially surrounding said cryptographic processor, and 
wherein said cryptographic processor is disabled based upon 
a break in said at least one conductor. 

21. A communications method comprising: 
coupling a cryptographic module to a Local Area 

Network (LAN) device, the cryptographic module comprising a 
first housing, a user LAN interface carried by the first 
housing, a cryptographic processor carried by the first 
housing and coupled to the user LAN interface; 

providing a communications module comprising a 
second housing and a network wireless LAN interface carried 
by the second housing and removably coupled to the 
cryptographic module; and 
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switching the network wireless LAN interface 
between wireless LAN modes, and using the network wireless 
LAN to communicate with a wireless LAN. 

22. The method of Claim 21 wherein switching 
comprises switching the network wireless LAN interface 
circuit to one of an access point (AP) mode, an 
infrastructure mode, and an ad-hoc mode. 

23. The method of Claim 21 wherein the 
cryptographic module further comprises a first connector 
carried by the first housing and coupled to the 
cryptographic processor; wherein the communications module 
further comprises a second connector carried by the second 
housing and connected to the network wireless LAN interface; 
and wherein removably coupling comprises removably mating 
the second connector to the first connector. 

24. The method of Claim 21 wherein the user LAN 
interface comprises an Ethernet interface. 

25. A communications method comprising: 
coupling a cryptographic module to a Local Area 

Network (LAN) device, the cryptographic module comprising a 
first housing, a user Local Area Network (LAN) interface 
carried by the first housing, and a cryptographic processor 
carried by the first housing and coupled to the user LAN 
interface; coupling the user LAN interface to a LAN device 

removably coupling one of a plurality of 
communications modules to the cryptographic module, the 
communications module comprising a second housing and a 
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network wireless LAN interface carried by the second 
housing, and the network wireless LAN interfaces of the 
plurality of interchangeable communications modules each 
operating in a different wireless LAN mode; and 

using the removably coupled communications module 
to communicate with a LAN. 

26. The method of Claim 25 wherein the different 
wireless LAN modes comprise an access point (AP) mode, an 
infrastructure mode, and an ad-hoc mode. 

27. The method of Claim 25 wherein the 
cryptographic module further comprises a first connector 
carried by the first housing and coupled to the 
cryptographic processor; wherein the communications module 
further comprises a second connector carried by the second 
housing and connected to the network wireless LAN interface; 
and wherein removably connecting comprises removably mating 
the second connector with the first connector of the 
cryptographic module. 

28. The method of Claim 25 wherein the user LAN 
interface comprises an Ethernet interface. 

29. A communications system comprising: 

a plurality of Local Area Network (LAN) devices 
coupled together to define a wireless LAN, and a 
cryptographic device coupled to at least one of said LAN 
devices; 

said cryptographic device comprising a 
cryptographic module coupled to said at least one LAN 
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device, and a communications module removably coupled to 
said cryptographic module; 

said cryptographic module comprising 
a first housing, 

a user LAN interface carried by said first 
housing, and 

a cryptographic processor carried by said 
first housing and coupled to said user LAN 
interface; 

said communications module comprising 
a second housing, and 

a network wireless LAN interface carried by 
said second housing, coupled to said cryptographic 
processor and switchable between wireless LAN 
modes . 

30. The communications system of Claim 29 wherein 
said network wireless LAN interface circuit is switchable to 
one of an access point (AP) mode, an infrastructure mode, 
and an ad-hoc mode. 

31. The communications system of Claim 29 wherein 
said cryptographic module further comprises a first 
connector carried by said first housing and coupled to said 
cryptographic processor; wherein said communications module 
further comprises a second connector carried by said second 
housing and connected to said network wireless LAN 
interface, said second connector being removably mateable 
with said first connector of said cryptographic module. 
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32. The communications system of Claim 29 wherein 
said user LAN interface comprises an Ethernet interface. 

33. The communications system of Claim 29 further 
comprising a power circuit carried by said first housing and 
powering said cryptographic processor, said user LAN 
interface, and said network LAN interface. 

34. The communications system of Claim 29 wherein 
said cryptographic processor implements an encryption 
algorithm to provide a predetermined security level. 

35. The communications system of Claim 29 wherein 
said cryptographic processor comprises: 

a host network processor coupled to said user LAN 
interface; and 

a cryptography circuit coupled to said host 
network processor. 

36. The communications system of Claim 35 wherein 
said cryptographic processor further comprises: 

an encrypted data buffer circuit coupled between 
said user LAN interface and said cryptography circuit; and 

an unencrypted data buffer circuit coupled between 
said cryptography circuit and said network LAN interface. 
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